ssl: narrow TLS 1.2 RSA-PSS handling and add interop coverage

Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>
This commit is contained in:
Viktor Sokolovskiy
2026-04-15 20:58:11 +03:00
parent f75c033ead
commit 2168fe9cda
6 changed files with 91 additions and 87 deletions

View File

@@ -1,4 +1,4 @@
Bugfix
* Fix a TLS 1.2 regression that caused clients to reject valid
ServerKeyExchange signatures using RSA-PSS signature scheme values.
ServerKeyExchange signatures using RSA-PSS signature algorithms.
Fixes #10668.